Windows 10 22H2 kiosk provisioning package ErrorCode(0xC00CE223)

Question

I am to setup a Windows 10 as a Kiosk multiapp, but always report a error with assigned access configuration failed error code (0xC00CE223).

I check and validate xml file in some sites on internet, Windows Configuration Designer build the package right, but when I add the package with double click ou through usb pen drive, always give an error related with assigned access.

XML in the beggining as a section AssignedAccessConfiguration. I have read that the schemas as related with windows version. Now I use Windows version 21H2 e 22H2, but schemas i found are to old windows versions and i found nothing in Microsoft or in any other site.

I tried these but report same error:

   xmlns:v2="https://schemas.microsoft.com/AssignedAccess/201810/config"  xmlns:v3="https://schemas.microsoft.com/AssignedAccess/2020/config"  
   xmlns:v4="https://schemas.microsoft.com/AssignedAccess/2021/config"  




   My xml file:  

<?xml version="1.0" encoding="utf-8" ?>
<AssignedAccessConfiguration
xmlns="https://schemas.microsoft.com/AssignedAccess/2017/config"
xmlns:rs5="https://schemas.microsoft.com/AssignedAccess/201810/config"
>
<Profiles>
<Profile Id="{5B328104-BD89-4863-AB27-4ED6EE355485}">
<AllAppsList>
<AllowedApps>
<App AppUserModelId="Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" />
<App AppUserModelId="Microsoft.ScreenSketch_8wekyb3d8bbwe!App" />
<App AppUserModelId="{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPow..." />
<App AppUserModelId="Microsoft.MSPaint_8wekyb3d8bbwe!Microsoft.MSPaint" />
<App AppUserModelId="Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge" />
<App AppUserModelId="{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\cmd.exe" />
<App DesktopAppPath="%windir%\system32\cleanmgr.exe"/>
</AllowedApps>
</AllAppsList>
rs5:FileExplorerNamespaceRestrictions>
<rs5:AllowedNamespace Name="Downloads"/>
rs5:FileExplorerNamespaceRestrictions>
<StartLayout>
<![CDATA[<LayoutModificationTemplate xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" Version="1" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification">
<LayoutOptions StartTileGroupCellWidth="6" />
<DefaultLayoutOverride>
<StartLayoutCollection>
<defaultlayout:StartLayout GroupCellWidth="6">
<start:Group Name="group1">
<start:Tile Size="4x4" Column="0" Row="0" AppUserModelID="Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" />
<start:Tile Size="2x2" Column="4" Row="2" AppUserModelID="Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge" />
<start:Tile Size="2x2" Column="4" Row="0" AppUserModelID="Microsoft.ScreenSketch_8wekyb3d8bbwe!App" />
<start:Tile Size="2x2" Column="4" Row="4" AppUserModelID="{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\WindowsPow..." />
</start:Group>
<start:Group Name="group2">
<start:DesktopApplicationTile Size="2x2" Column="2" Row="0" DesktopApplicationLinkPath="%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk" />
<start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="%APPDATA%\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk" />
</start:Group>
</defaultlayout:StartLayout>
</StartLayoutCollection>
</DefaultLayoutOverride>
</LayoutModificationTemplate>
]]>
</StartLayout>
<Taskbar ShowTaskbar="true"/>
</Profile>
</Profiles>
<Configs>
<Config>
<AutoLogonAccount rs5:DisplayName="CMCuser"/>
<DefaultProfile Id="{5B328104-BD89-4863-AB27-4ED6EE355485}"/>
</Config>
</Configs>
</AssignedAccessConfiguration>

   Anyone could help or have same problem?  
     
   Regarts  
   Jose

Answer 1

I've discovered through much trial and error, the solution is to use "http" not "https" when defining the base namespace url ([http://schemas.microsoft.com/AssignedAccess/2017/config]). There appears to be a bug with Microsoft's parser that breaks when using "https." For every other namespace url, you can use either http or https.

The stupid thing is, namespace urls don't actually resolve to sites, they simply act as human-readable unique-identifiers, like, the commonly seen format, "com.microsoft.vscode.myproject." So, someone at Microsoft just needs to update their parsing to accept either http or https, like it already does for any other namespace. It was a real headache to isolate...

If you notice, in every example Microsoft provides for Windows 10, they use the incorrect namespace, as seen here:

 Anyway, I hope this will save a few walls from headbangings.